Thanks Joe! this certainly solves my problem.
Actually, this method wouldn't work out for me as I want end-users have no access to "undo data extract" when using Tableau Desktop. The data in the master file is too senstive information.
Is there another way?